aurora-wordpress-admin/admin/src/Pages/SubApps.php

<?php
namespace AuroraAdmin\Pages;

use AuroraAdmin\Utility\Assets;

defined("ABSPATH") || exit();

/**
 * Registers Aurora's 5 secondary full-page apps (Menu Creator, Admin
 * Notices, Role Editor, Activity Log, Database Explorer). Each is a real WP
 * admin page (proper capability check, working URL, its own hook_suffix for
 * asset gating) registered as a submenu of "aurora-admin" — then
 * immediately hidden from WordPress's own submenu via remove_submenu_page(),
 * the standard register-but-hide trick. This keeps them out of the
 * WP-native menu list (MenuSerializer never sees them, nothing to filter)
 * while still being reachable, permission-checked pages; they're presented
 * instead in the sidebar's dedicated Aurora nav section (see Shell::aurora_nav()).
 */
class SubApps
{
  const PAGES = [
    "aurora-admin-menu-creator" => ["title" => "Menu Creator", "entry" => "menu-creator"],
    "aurora-admin-notices" => ["title" => "Admin Notices", "entry" => "admin-notices"],
    "aurora-admin-roles" => ["title" => "Role Editor", "entry" => "role-editor"],
    "aurora-admin-activity-log" => ["title" => "Activity Log", "entry" => "activity-log"],
    "aurora-admin-database" => ["title" => "Database Explorer", "entry" => "database-explorer"],
    "aurora-admin-plugins" => ["title" => "Installed Plugins", "entry" => "plugins"],
  ];

  private static $hook_suffixes = [];

  public function __construct()
  {
    add_action("admin_menu", [self::class, "register_menus"]);
    add_action("admin_menu", [self::class, "hide_from_native_submenu"], 999);
    add_action("admin_enqueue_scripts", [self::class, "maybe_enqueue"]);
  }

  public static function register_menus()
  {
    foreach (self::PAGES as $slug => $page) {
      $parent = $slug === "aurora-admin-plugins" ? "plugins.php" : "aurora-admin";
      $hook = add_submenu_page(
        $parent,
        __($page["title"], "aurora-admin"),
        __($page["title"], "aurora-admin"),
        $slug === "aurora-admin-plugins" ? "activate_plugins" : "manage_options",
        $slug,
        [self::class, "render"]
      );
      self::$hook_suffixes[$slug] = $hook;
    }
  }

  public static function hide_from_native_submenu()
  {
    foreach (array_keys(self::PAGES) as $slug) {
      remove_submenu_page($slug === "aurora-admin-plugins" ? "plugins.php" : "aurora-admin", $slug);
    }
  }

  public static function maybe_enqueue($hook_suffix)
  {
    $slug = array_search($hook_suffix, self::$hook_suffixes, true);
    if ($slug === false || !isset(self::PAGES[$slug])) {
      return;
    }

    Assets::enqueue("aurora-admin-" . self::PAGES[$slug]["entry"], "entries/" . self::PAGES[$slug]["entry"] . ".js");
  }

  public static function render()
  {
    $page = isset($_GET["page"]) ? sanitize_text_field(wp_unslash($_GET["page"])) : "";
    if (!isset(self::PAGES[$page])) {
      return;
    }

    $roles = [];
    foreach (wp_roles()->roles as $slug => $info) {
      $roles[] = ["value" => $slug, "label" => translate_user_role($info["name"])];
    }

    global $wpdb;

    $data = [
      "restUrl" => esc_url_raw(get_rest_url()),
      "restNonce" => wp_create_nonce("wp_rest"),
      "userName" => wp_get_current_user()->display_name,
      "roles" => $roles,
      "tablePrefix" => $wpdb->prefix,
    ];
    $root_id = "aurora-admin-" . self::PAGES[$page]["entry"] . "-root";
    ?>
    <div
      id="<?php echo esc_attr($root_id); ?>"
      data-aurora-admin="<?php echo esc_attr(wp_json_encode($data)); ?>"
    ></div>
    <?php
  }
}